Added all items from CIS Section 7 Levels 1 & 2

https://benchmarks.cisecurity.org/tools2/ubuntu/CIS_Ubuntu_12.04_LTS_Server_Benchmark_v1.0.0.pdf
ufw is a system service that serves as a utility to provide firewall
configuration.  The others are all system daemons that provide external
facing services.  So I think that is where the distinction was created.
Further ufw is already on the box, and the action is to enable it.

On Thu, Sep 25, 2014 at 11:44 AM, Michael Warkentin <
notifications@github.com> wrote:

> In defaults/main.yml:
>
> > -# Options:
> > -#   yes: enable iptables and load the rules from /etc/sysconfig/iptables
> > -#   no: don't alter iptables whatsoever
> > -enable_iptables: no
> > -
> > -# Enable ip6tables (CIS 4.8)
> > -# You should check to see that your current ip6tables configuration in
> > -# /etc/sysconfig/ip6tables is configured properly so that you don't lose access
> > -# to your server when ip6tables is enabled.  If you're alreading using ip6tables,
> > -# then this setting won't affect you either way.
> > -# Options:
> > -#   yes: enable ip6tables and load the rules from /etc/sysconfig/ip6tables
> > -#   no: don't alter ip6tables whatsoever
> > -enable_ip6tables: no
> > +# Enable ufw (CIS 7.7)
> > +enable_ufw: yes
>
> The other options above don't use enable (eg. dns, ftp, nfs, etc.) -
> should this just be ufw instead?
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/waveaccounting/ansible-role-cis/pull/6/files#r18039858>
> .
>



-- 
Cheers,

-- 
Steve Houser
DevOps Developer

Wave
waveapps.com
shouser@wave <shouser@waveaccounting.com>apps.com
(cell) *720.891.2243*




Join us on Twitter: twitter.com/WaveHQ <http://twitter.com/wavehq>
Join us on Facebook: facebook.com/WaveHQ <http://facebook.com/wavehq>